mirror of
https://github.com/AdaCore/cpython.git
synced 2026-02-12 12:57:15 -08:00
Mention issue6972 in extractall docs about overwriting things outside of
the supplied path.
This commit is contained in:
@@ -207,6 +207,13 @@ ZipFile Objects
|
||||
be a subset of the list returned by :meth:`namelist`. *pwd* is the password
|
||||
used for encrypted files.
|
||||
|
||||
.. warning::
|
||||
|
||||
Never extract archives from untrusted sources without prior inspection.
|
||||
It is possible that files are created outside of *path*, e.g. members
|
||||
that have absolute filenames starting with ``"/"`` or filenames with two
|
||||
dots ``".."``.
|
||||
|
||||
.. versionadded:: 2.6
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user